@claude-transcripts/cli 0.5.0 → 0.6.0

package/dist/{cli-byvjee1b.js → cli-tspndnr8.js}

@@ -1,5 +1,5 @@
 // @bun
-// packages/shared/src/model/cli-project.ts
+// packages/shared/src/blueprint/cli-project.ts
 var isFlag = (a) => a.name.startsWith("--");
 function cliArgType(a) {
   if (a.type)
@@ -380,7 +380,7 @@ ${lines.join(`
 `;
 }
 
-// packages/shared/src/model/cli.ts
+// packages/shared/src/blueprint/cli.ts
 var WEBAPI = {
   name: "--webapi",
   type: "string",
@@ -717,470 +717,61 @@ var CLI_SPEC = {
   ]
 };
 
-// packages/shared/src/couch-url.ts
-var DEFAULT_COUCHDB_HOST = "127.0.0.1";
-var DEFAULT_COUCHDB_PORT = "7652";
-function trimTrailingSlash(url) {
-  return url.replace(/\/+$/, "");
-}
-function resolveCouchUrl(env = {}) {
-  const explicit = env.COUCHDB_URL?.trim();
-  if (explicit) {
-    const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(explicit) ? explicit : `http://${explicit}`;
-    return trimTrailingSlash(withScheme);
-  }
-  const host = env.COUCHDB_HOST || DEFAULT_COUCHDB_HOST;
-  const port = env.COUCHDB_PORT || DEFAULT_COUCHDB_PORT;
-  return `http://${host}:${port}`;
-}
-// packages/shared/src/highlight.ts
-var HIGHLIGHT_PRE = "\uE000";
-var HIGHLIGHT_POST = "\uE001";
-function stripHighlightMarks(marked) {
-  return marked.replaceAll(HIGHLIGHT_PRE, "").replaceAll(HIGHLIGHT_POST, "");
-}
-// packages/shared/src/migrations/designs.ts
-var CHUNK_ENTRIES_MAP = `function (doc) {
-  if (doc.type !== "chunk" || !doc.entries) return;
-  for (var i = 0; i < doc.entries.length; i++) {
-    var e = doc.entries[i];
-    if (!e || !e.role) continue;
-    emit([doc.session_id, doc.byte_start, i], {
-      role: e.role,
-      timestamp: e.timestamp || "",
-      text: e.text || "",
-      toolUses: e.toolUses || null,
-      toolUseId: e.toolUseId || null,
-      isError: e.isError || false,
-      isSidechain: e.isSidechain || false,
-      kind: e.kind || null
-    });
-  }
-}`;
-var CHUNKS_DESIGN = {
-  _id: "_design/chunks",
-  language: "javascript",
-  views: {
-    by_session: {
-      map: 'function(doc){if(doc.type==="chunk"){emit([doc.session_id,doc.byte_start],{byte_start:doc.byte_start,byte_end:doc.byte_end,entry_count:doc.entry_count});}}'
-    },
-    entry_count_by_session: {
-      map: 'function(doc){if(doc.type==="chunk"){emit(doc.session_id,doc.entry_count||0);}}',
-      reduce: "_sum"
-    },
-    entries_by_session: { map: CHUNK_ENTRIES_MAP, reduce: "_count" }
-  }
-};
-var INITIAL_DESIGNS = [
+// packages/shared/src/blueprint/actions.ts
+var ACTIONS = [
   {
-    _id: "_design/sessions",
-    language: "javascript",
-    views: {
-      by_date: {
-        map: 'function(doc){if(doc.type==="summary"){var t=doc.timestamp.split(/[-T:]/);emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],{session_id:doc.session_id,event_count:doc.event_count,prompt_count:doc.prompt_count,error_count:doc.error_count,cwd:doc.cwd});}}',
-        reduce: "_count"
-      },
-      by_cwd: {
-        map: 'function(doc){if(doc.type==="summary"){emit([doc.cwd,doc.timestamp],{session_id:doc.session_id,event_count:doc.event_count,prompt_count:doc.prompt_count});}}',
-        reduce: "_count"
-      }
-    }
+    key: "write-event-marker",
+    summary: "Append a light append-only event marker doc",
+    implemented: true
   },
   {
-    _id: "_design/events",
-    language: "javascript",
-    views: {
-      by_session: {
-        map: 'function(doc){if(doc.type==="event"){emit([doc.session_id,doc.timestamp],{event:doc.event,tool_name:doc.tool_name||null,input_preview:doc.input_preview||doc.prompt_preview||doc.error_preview||null});}}'
-      },
-      by_type: {
-        map: 'function(doc){if(doc.type==="event"){var t=doc.timestamp.split(/[-T:]/);emit([doc.event,parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],1);}}',
-        reduce: "_count"
-      }
-    }
+    key: "update-counts",
+    summary: "Bump per-session counters (events/prompts/errors/tools)",
+    implemented: true
   },
   {
-    _id: "_design/tools",
-    language: "javascript",
-    views: {
-      usage: {
-        map: 'function(doc){if(doc.type==="event"&&doc.tool_name){var t=doc.timestamp.split(/[-T:]/);emit([doc.tool_name,parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],1);}}',
-        reduce: "_count"
-      },
-      failures: {
-        map: 'function(doc){if(doc.event==="PostToolUseFailure"){emit([doc.tool_name,doc.timestamp],{session_id:doc.session_id,error_preview:doc.error_preview,cwd:doc.cwd});}}'
-      },
-      errors: {
-        map: 'function(doc){if(doc.event==="PostToolUseFailure"||doc.error){emit([doc.tool_name||"unknown",doc.timestamp],{session_id:doc.session_id,error_preview:doc.error_preview||doc.error,cwd:doc.cwd});}}'
-      }
-    }
+    key: "flush-transcript-chunk",
+    summary: "Tail the transcript \u2192 append chunk docs",
+    implemented: true
   },
+  { key: "write-summary", summary: "Write summary:<id> at session end", implemented: true },
   {
-    _id: "_design/activity",
-    language: "javascript",
-    views: {
-      timeline: {
-        map: 'function(doc){if(doc.type==="event"){var t=doc.timestamp.split(/[-T:]/);emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2]),parseInt(t[3])],1);}}',
-        reduce: "_count"
-      }
-    }
+    key: "upload-blobs",
+    summary: "Upload summary.json + transcript.jsonl to S3",
+    implemented: true
   },
-  CHUNKS_DESIGN,
   {
-    _id: "_design/session_meta",
-    language: "javascript",
-    views: {
-      start_meta: {
-        map: 'function(doc){if(doc.event==="SessionStart"){emit(doc.session_id,{timestamp:doc.timestamp,model:doc.model||"",cwd:doc.cwd||"",hostname:doc.hostname||""});}}'
-      },
-      tokens_by_date: {
-        map: 'function(doc){if(doc.type==="summary"&&doc.token_usage){var t=doc.timestamp.split(/[-T:]/);var u=doc.token_usage;emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],{input:u.input||0,output:u.output||0,cacheCreation:u.cacheCreation||0,cacheRead:u.cacheRead||0,total:u.total||0,sessions:1});}}',
-        reduce: "_sum"
-      }
-    }
-  }
-];
-// packages/shared/src/migrations/session-index.ts
-var AGGREGATE_MAP = `function (doc) {
-  if (!doc.session_id) return;
-  // A \`chunk\` doc contributes transcript coverage ONLY \u2014 no timestamps, no counts \u2014
-  // so every other metric keeps the exact meaning it had before chunks were indexed.
-  // \`chunkEntries\` counts turns the chunk view can actually serve (byte-range-only
-  // chunks carry no \`entries[]\`), while \`chunkBytes\` tracks raw byte coverage.
-  if (doc.type === "chunk") {
-    emit(doc.session_id, {
-      ended: 0, events: 0, prompts: 0, errors: 0, started: 0, tools: {},
-      first: "", last: "", model: "", cwd: "", hostname: "",
-      modelAt: "", cwdAt: "", hostnameAt: "", summary: null,
-      chunkEntries: doc.entries ? doc.entries.length : 0,
-      chunkBytes: doc.byte_end || 0
-    });
-    return;
-  }
-  if (doc.type !== "event" && doc.type !== "summary") return;
-  var isSummary = doc.type === "summary";
-  var ts = doc.timestamp || "";
-  var model = (doc.event === "SessionStart" || isSummary) ? (doc.model || "") : "";
-  var tools = {};
-  if (doc.event === "PostToolUse" && doc.tool_name) tools[doc.tool_name] = 1;
-  emit(doc.session_id, {
-    ended: isSummary ? 1 : 0,
-    events: doc.type === "event" ? 1 : 0,
-    prompts: doc.event === "UserPromptSubmit" ? 1 : 0,
-    errors: doc.event === "PostToolUseFailure" ? 1 : 0,
-    started: doc.event === "SessionStart" ? 1 : 0,
-    tools: tools,
-    first: ts,
-    last: ts,
-    model: model,
-    cwd: doc.cwd || "",
-    hostname: doc.hostname || "",
-    modelAt: model ? ts : "",
-    cwdAt: doc.cwd ? ts : "",
-    hostnameAt: doc.hostname ? ts : "",
-    summary: isSummary ? {
-      event_count: doc.event_count || 0,
-      prompt_count: doc.prompt_count || 0,
-      error_count: doc.error_count || 0,
-      tool_counts: doc.tool_counts || {},
-      end_reason: doc.end_reason || "",
-      transcript_bytes: doc.transcript_bytes || 0,
-      token_usage: doc.token_usage || null,
-      timestamp: doc.timestamp || "",
-      source: doc.source || ""
-    } : null,
-    chunkEntries: 0,
-    chunkBytes: 0
-  });
-}`;
-var AGGREGATE_REDUCE = `function (keys, values, rereduce) {
-  var acc = { ended:0, events:0, prompts:0, errors:0, started:0, tools:{}, first:"", last:"", model:"", cwd:"", hostname:"", modelAt:"", cwdAt:"", hostnameAt:"", summary:null, chunkEntries:0, chunkBytes:0 };
-  // Keep the earliest-stamped value; an unstamped one sorts last, ties go to the smaller value.
-  function earliest(v, f) {
-    var val = v[f];
-    if (!val) return;
-    var at = v[f + "At"] || "", a = at || "\\uffff", b = acc[f + "At"] || "\\uffff";
-    if (acc[f] === "" || a < b || (a === b && val < acc[f])) { acc[f] = val; acc[f + "At"] = at; }
-  }
-  for (var i = 0; i < values.length; i++) {
-    var v = values[i];
-    if (!v) continue;
-    acc.chunkEntries += v.chunkEntries || 0;
-    if ((v.chunkBytes || 0) > acc.chunkBytes) acc.chunkBytes = v.chunkBytes;
-    acc.ended += v.ended || 0;
-    acc.events += v.events || 0;
-    acc.prompts += v.prompts || 0;
-    acc.errors += v.errors || 0;
-    acc.started += v.started || 0;
-    if (v.last && v.last > acc.last) acc.last = v.last;
-    if (v.first && (acc.first === "" || v.first < acc.first)) acc.first = v.first;
-    earliest(v, "model");
-    earliest(v, "cwd");
-    earliest(v, "hostname");
-    // A session has one \`summary:<id>\` doc, so there is only ever one to keep.
-    if (v.summary) acc.summary = v.summary;
-    var t = v.tools || {};
-    for (var k in t) { if (t.hasOwnProperty(k)) acc.tools[k] = (acc.tools[k] || 0) + t[k]; }
-  }
-  var names = Object.keys(acc.tools).sort(), tools = {};
-  for (var j = 0; j < names.length; j++) tools[names[j]] = acc.tools[names[j]];
-  acc.tools = tools;
-  return acc;
-}`;
-var EVENT_TIMES_MAP = `function (doc) {
-  if (!doc.session_id || !doc.timestamp) return;
-  if (doc.type !== "event" && doc.type !== "summary") return;
-  emit(doc.session_id, doc.timestamp);
-}`;
-var SESSION_INDEX_DESIGN = {
-  _id: "_design/session_index",
-  language: "javascript",
-  views: {
-    aggregate: { map: AGGREGATE_MAP, reduce: AGGREGATE_REDUCE },
-    event_times: { map: EVENT_TIMES_MAP }
-  }
-};
-
-// packages/shared/src/migrations/speaker-split.ts
-var BY_ROLE_MAP = `function (doc) {
-  if (doc.type !== "chunk" || !doc.entries) return;
-  for (var i = 0; i < doc.entries.length; i++) {
-    var e = doc.entries[i];
-    if (!e || !e.role) continue;
-    emit([doc.session_id, e.role, doc.byte_start, i], {
-      role: e.role,
-      timestamp: e.timestamp || "",
-      text: e.text || "",
-      toolUses: e.toolUses || null,
-      toolUseId: e.toolUseId || null,
-      isError: e.isError || false
-    });
-  }
-}`;
-var BY_ROLE_TIME_MAP = `function (doc) {
-  if (doc.type !== "chunk" || !doc.entries) return;
-  for (var i = 0; i < doc.entries.length; i++) {
-    var e = doc.entries[i];
-    if (!e || !e.role) continue;
-    emit([e.role, e.timestamp || "", doc.session_id, doc.byte_start, i], {
-      sessionId: doc.session_id,
-      cwd: doc.cwd || "",
-      role: e.role,
-      timestamp: e.timestamp || "",
-      text: e.text || ""
-    });
-  }
-}`;
-var SPEAKER_SPLIT_DESIGN = {
-  _id: "_design/speaker_split",
-  language: "javascript",
-  views: {
-    by_role: { map: BY_ROLE_MAP, reduce: "_count" },
-    by_role_time: { map: BY_ROLE_TIME_MAP, reduce: "_count" }
-  }
-};
-
-// packages/shared/src/migrations/registry.ts
-var initialSchema = {
-  id: 1,
-  name: "initial-schema",
-  async up(ctx) {
-    for (const design of INITIAL_DESIGNS) {
-      ctx.log(`+ ${design._id}`);
-      const { _rev, ...body } = design;
-      await ctx.putDoc(design._id, body);
-    }
-  },
-  async down(ctx) {
-    for (const design of INITIAL_DESIGNS) {
-      ctx.log(`- ${design._id}`);
-      await ctx.deleteDoc(design._id);
-    }
-  }
-};
-var sessionIndexView = {
-  id: 2,
-  name: "session-index-view",
-  async up(ctx) {
-    ctx.log(`+ ${SESSION_INDEX_DESIGN._id}`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`- ${SESSION_INDEX_DESIGN._id}`);
-    await ctx.deleteDoc(SESSION_INDEX_DESIGN._id);
-  }
-};
-var sessionIndexSource = {
-  id: 3,
-  name: "session-index-source",
-  async up(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (emit summary.source)`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (source field left in place \u2014 additive)`);
-  }
-};
-var speakerSplitView = {
-  id: 4,
-  name: "speaker-split-view",
-  async up(ctx) {
-    ctx.log(`+ ${SPEAKER_SPLIT_DESIGN._id}`);
-    const { _rev, ...body } = SPEAKER_SPLIT_DESIGN;
-    await ctx.putDoc(SPEAKER_SPLIT_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`- ${SPEAKER_SPLIT_DESIGN._id}`);
-    await ctx.deleteDoc(SPEAKER_SPLIT_DESIGN._id);
-  }
-};
-var speakerSplitTimeView = {
-  id: 5,
-  name: "speaker-split-time-view",
-  async up(ctx) {
-    ctx.log(`~ ${SPEAKER_SPLIT_DESIGN._id} (add by_role_time)`);
-    const { _rev, ...body } = SPEAKER_SPLIT_DESIGN;
-    await ctx.putDoc(SPEAKER_SPLIT_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${SPEAKER_SPLIT_DESIGN._id} (by_role_time left in place \u2014 additive)`);
-  }
-};
-var chunkEntriesView = {
-  id: 6,
-  name: "chunk-entries-view",
-  async up(ctx) {
-    ctx.log(`~ ${CHUNKS_DESIGN._id} (add entries_by_session)`);
-    const { _rev, ...body } = CHUNKS_DESIGN;
-    await ctx.putDoc(CHUNKS_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${CHUNKS_DESIGN._id} (entries_by_session left in place \u2014 additive)`);
-  }
-};
-var sessionIndexChunkCoverage = {
-  id: 7,
-  name: "session-index-chunk-coverage",
-  async up(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (emit chunk coverage)`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (chunk coverage left in place \u2014 additive)`);
-  }
-};
-var chunkEntryKind = {
-  id: 8,
-  name: "chunk-entry-kind",
-  async up(ctx) {
-    ctx.log(`~ ${CHUNKS_DESIGN._id} (emit entry kind)`);
-    const { _rev, ...body } = CHUNKS_DESIGN;
-    await ctx.putDoc(CHUNKS_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${CHUNKS_DESIGN._id} (kind left in place \u2014 additive)`);
-  }
-};
-var sessionIndexEventTimes = {
-  id: 9,
-  name: "session-index-event-times",
-  async up(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (add event_times view)`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (event_times left in place \u2014 additive)`);
-  }
-};
-var sessionIndexDeterministic = {
-  id: 10,
-  name: "session-index-deterministic",
-  async up(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (earliest model/cwd/hostname)`);
-    const { _rev, ...body } = SESSION_INDEX_DESIGN;
-    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
-  },
-  async down(ctx) {
-    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (deterministic pick left in place)`);
-  }
-};
-var MIGRATIONS = [
-  initialSchema,
-  sessionIndexView,
-  sessionIndexSource,
-  speakerSplitView,
-  speakerSplitTimeView,
-  chunkEntriesView,
-  sessionIndexChunkCoverage,
-  chunkEntryKind,
-  sessionIndexEventTimes,
-  sessionIndexDeterministic
-];
-function latestVersion() {
-  return MIGRATIONS.reduce((max, m) => Math.max(max, m.id), 0);
-}
-function docTransformsBetween(from, to, migrations = MIGRATIONS) {
-  return migrations.filter((m) => m.id > from && m.id <= to && m.transformsDocs === true).sort((a, b) => a.id - b.id).map((m) => ({ id: m.id, name: m.name }));
-}
-// packages/shared/src/model/actions.ts
-var ACTIONS = [
-  {
-    key: "write-event-marker",
-    summary: "Append a light append-only event marker doc",
-    implemented: true
-  },
-  {
-    key: "update-counts",
-    summary: "Bump per-session counters (events/prompts/errors/tools)",
-    implemented: true
-  },
-  {
-    key: "flush-transcript-chunk",
-    summary: "Tail the transcript \u2192 append chunk docs",
-    implemented: true
-  },
-  { key: "write-summary", summary: "Write summary:<id> at session end", implemented: true },
-  {
-    key: "upload-blobs",
-    summary: "Upload summary.json + transcript.jsonl to S3",
-    implemented: true
-  },
-  {
-    key: "seed-session-start",
-    summary: "Reset counters + seed the chunk offset at start",
-    implemented: true
-  },
-  {
-    key: "announce-recording",
-    summary: "Tell the user, in the transcript, whether and where this session is recorded",
-    implemented: true
-  },
-  {
-    key: "inject-recall-policy",
-    summary: "Prime the session with the recall policy + how much history this cwd has",
-    implemented: true
-  },
-  { key: "enrich-metadata", summary: "Post additional session metadata", implemented: false },
-  {
-    key: "extract-feature",
-    summary: "Map-reduce feature extraction (urls/repos/PRs/\u2026)",
-    implemented: false
-  },
-  { key: "detect-memory-write", summary: "Flag Edit/Write to memory paths", implemented: false },
-  { key: "app-log", summary: "Emit an operational log record (app-logs DB)", implemented: false },
-  {
-    key: "index-for-search",
-    summary: "Push derived content to the search backend",
-    implemented: false
-  },
-  {
-    key: "reconcile-session",
-    summary: "Finalize a stale running session from chunks/S3",
-    implemented: false
+    key: "seed-session-start",
+    summary: "Reset counters + seed the chunk offset at start",
+    implemented: true
+  },
+  {
+    key: "announce-recording",
+    summary: "Tell the user, in the transcript, whether and where this session is recorded",
+    implemented: true
+  },
+  {
+    key: "inject-recall-policy",
+    summary: "Prime the session with the recall policy + how much history this cwd has",
+    implemented: true
+  },
+  { key: "enrich-metadata", summary: "Post additional session metadata", implemented: false },
+  {
+    key: "extract-feature",
+    summary: "Map-reduce feature extraction (urls/repos/PRs/\u2026)",
+    implemented: false
+  },
+  { key: "detect-memory-write", summary: "Flag Edit/Write to memory paths", implemented: false },
+  { key: "app-log", summary: "Emit an operational log record (app-logs DB)", implemented: false },
+  {
+    key: "index-for-search",
+    summary: "Push derived content to the search backend",
+    implemented: false
+  },
+  {
+    key: "reconcile-session",
+    summary: "Finalize a stale running session from chunks/S3",
+    implemented: false
   }
 ];
 var BINDINGS = [
@@ -1213,7 +804,7 @@ var BINDINGS = [
   { event: "PostCompact", actions: ["write-event-marker"] },
   { event: "SessionEnd", actions: ["flush-transcript-chunk", "write-summary", "upload-blobs"] }
 ];
-// packages/shared/src/model/env.ts
+// packages/shared/src/blueprint/env.ts
 var ENV_VARS = [
   {
     name: "IMAGE_NS",
@@ -1223,6 +814,7 @@ var ENV_VARS = [
   { name: "COUCHDB_TAG", scope: "image", default: "3", description: "CouchDB image tag" },
   { name: "GARAGE_TAG", scope: "image", default: "v2.3.0", description: "Garage image tag" },
   { name: "GARAGE_UI_TAG", scope: "image", default: "1.1.0", description: "Garage UI image tag" },
+  { name: "FOSSIL_TAG", scope: "image", default: "2.28", description: "Fossil image tag" },
   { name: "MEILI_TAG", scope: "image", default: "v1.10", description: "Meilisearch image tag" },
   {
     name: "MEILI_UI_TAG",
@@ -1259,6 +851,12 @@ var ENV_VARS = [
     default: "7657",
     description: "Meilisearch UI host port"
   },
+  {
+    name: "FOSSIL_PORT",
+    scope: "port",
+    default: "7658",
+    description: "Fossil web UI + sync host port"
+  },
   { name: "WEBAPI_HOST", scope: "host", default: "127.0.0.1", description: "webapi bind host" },
   { name: "WEBUI_HOST", scope: "host", default: "127.0.0.1", description: "webui bind host" },
   { name: "CT_STATIC_DIR", scope: "host", description: "prebuilt SPA dir (prod image only)" },
@@ -1293,6 +891,12 @@ var ENV_VARS = [
     default: "http://127.0.0.1:7656",
     description: "Meilisearch endpoint URL"
   },
+  {
+    name: "FOSSIL_URL",
+    scope: "endpoint",
+    default: "http://127.0.0.1:7658",
+    description: "Fossil server base URL (serves each repository at /<name>/)"
+  },
   {
     name: "MEILI_API_KEY",
     scope: "secret",
@@ -1300,7 +904,7 @@ var ENV_VARS = [
   }
 ];
 
-// packages/shared/src/model/hooks.ts
+// packages/shared/src/blueprint/hooks.ts
 var HOOK_TYPES = [
   {
     event: "SessionStart",
@@ -1537,7 +1141,7 @@ function hookLaunch(command) {
 }
 var PLUGIN_HOOK_COMMAND = hookLaunch('bun run "${CLAUDE_PLUGIN_ROOT}/scripts/dispatch.ts"');
 
-// packages/shared/src/model/recall.ts
+// packages/shared/src/blueprint/recall.ts
 var RECALL_MODES = ["off", "suggest", "auto"];
 var RECALL_SCOPES = ["project", "host", "all"];
 var DEFAULT_RECALL = {
@@ -1628,30 +1232,59 @@ function joinOr(items) {
   return `${items.slice(0, -1).join(", ")}, or ${items[items.length - 1]}`;
 }
 
-// packages/shared/src/model/routes.ts
+// packages/shared/src/blueprint/routes.ts
 var ROUTES = [
-  { path: "/", serves: "machine-readable app manifest (agent entrypoint)" },
-  { path: "/health", serves: "liveness + store reachability" },
-  { path: "/api", serves: "app JSON API (the gateway)" },
-  { path: "/api/docs", serves: "Scalar API reference (renders the OpenAPI spec)" },
-  { path: "/api/openapi.json", serves: "OpenAPI spec (contract source of truth)" },
-  { path: "/api/couch/*", serves: "read-only CouchDB proxy" },
-  { path: "/api/s3/*", serves: "read-only S3 proxy" },
-  { path: "/api/sessions", serves: "session list / detail / transcript / turns" },
-  { path: "/api/turns", serves: "turns across all sessions, time-ordered by speaker" },
-  { path: "/api/search", serves: "full-text search over sessions + conversation content" },
   {
-    path: "/api/ingest",
+    path: "/",
+    serves: "machine-readable app manifest (agent entrypoint)",
+    nav: { label: "App manifest", section: "Reference" }
+  },
+  {
+    path: "/health",
+    serves: "liveness + store reachability",
+    nav: { label: "Health", section: "Reference" }
+  },
+  { path: "/api", serves: "app JSON API (the gateway)" },
+  {
+    path: "/api/docs",
+    serves: "Scalar API reference (renders the OpenAPI spec)",
+    nav: { label: "API reference", section: "Reference" }
+  },
+  {
+    path: "/api/openapi.json",
+    serves: "OpenAPI spec (contract source of truth)",
+    nav: { label: "OpenAPI spec", section: "Reference" }
+  },
+  { path: "/api/couch/*", serves: "read-only CouchDB proxy" },
+  { path: "/api/s3/*", serves: "read-only S3 proxy" },
+  { path: "/api/fossil/*", serves: "read-only Fossil JSON API proxy" },
+  { path: "/api/sessions", serves: "session list / detail / transcript / turns" },
+  { path: "/api/turns", serves: "turns across all sessions, time-ordered by speaker" },
+  { path: "/api/search", serves: "full-text search over sessions + conversation content" },
+  {
+    path: "/api/ingest",
     serves: "curated write surface (summary/events/chunks/transcript, reset)"
   },
   { path: "/api/migrate", serves: "schema migration status / up / down" },
-  { path: "/api/model", serves: "app model introspection (services/hooks/actions/env)" },
+  {
+    path: "/api/blueprint",
+    serves: "app blueprint introspection (services/hooks/actions/env)",
+    nav: { label: "App blueprint", section: "Reference" }
+  },
   { path: "/app", serves: "webui SPA" },
-  { path: "/docs", serves: "rendered technical docs" },
-  { path: "/cli/download", serves: "the bundled CLI binary" }
+  {
+    path: "/docs",
+    serves: "rendered technical docs",
+    nav: { label: "Technical docs", section: "Reference" }
+  },
+  {
+    path: "/cli/download",
+    serves: "the bundled CLI binary",
+    nav: { label: "Download CLI", section: "Install" }
+  }
 ];
 
-// packages/shared/src/model/services.ts
+// packages/shared/src/blueprint/services.ts
 var RELEASE_IMAGE_NS = "ghcr.io/vredchenko";
 var SERVICES = [
   {
@@ -1687,6 +1320,7 @@ var SERVICES = [
     ],
     adminUiServiceKey: "couchdbFauxton",
     adminUiPath: "/_utils/",
+    holds: "databases",
     volumes: [{ host: "./data/couchdb", container: "/opt/couchdb/data" }],
     containerEnv: {
       COUCHDB_USER: "${COUCHDB_USER:-admin}",
@@ -1709,6 +1343,7 @@ var SERVICES = [
       { internal: 3900, hostEnv: "GARAGE_S3_PORT", defaultHost: 7653, label: "S3 API" },
       { internal: 3903, hostEnv: "GARAGE_ADMIN_PORT", defaultHost: 7654, label: "admin API" }
     ],
+    holds: "buckets",
     volumes: [
       { host: "./data/garage/meta", container: "/var/lib/garage/meta" },
       { host: "./data/garage/data", container: "/var/lib/garage/data" },
@@ -1742,6 +1377,24 @@ var SERVICES = [
       S3_REGION: "garage"
     }
   },
+  {
+    key: "fossil",
+    name: "Fossil",
+    role: "backing",
+    image: {
+      name: "fossil",
+      tagEnv: "FOSSIL_TAG",
+      defaultTag: "2.28",
+      build: { context: "./fossil" }
+    },
+    ports: [{ internal: 8080, hostEnv: "FOSSIL_PORT", defaultHost: 7658, label: "web UI + sync" }],
+    adminUiServiceKey: "fossil",
+    holds: "repositories",
+    volumes: [{ host: "./data/fossil", container: "/museum" }],
+    containerEnv: { FOSSIL_REPOSITORIES: "${FOSSIL_REPOSITORIES:-claude-transcripts-sessions}" },
+    tcpHealth: { port: 8080 },
+    notes: "Version control (repos + web UI) from one static binary. Read by the webapi (read-only JSON API proxy); nothing writes it yet. Seeds the repositories named in config on start (anonymous read-only); serves every <name>.fossil under /museum."
+  },
   {
     key: "meilisearch",
     name: "Meilisearch",
@@ -1754,6 +1407,7 @@ var SERVICES = [
     },
     ports: [{ internal: 7700, hostEnv: "MEILI_PORT", defaultHost: 7656 }],
     adminUiServiceKey: "meilisearch",
+    holds: "indexes",
     volumes: [{ host: "./data/meilisearch", container: "/meili_data" }],
     containerEnv: { MEILI_ENV: "development" },
     notes: "Derived search index (optional/removable). Built-in UI on /."
@@ -1779,21 +1433,22 @@ var SERVICES = [
     image: { name: "app", tagEnv: "APP_TAG", defaultTag: "latest" },
     ports: [{ internal: 7650, hostEnv: "WEBAPI_PORT", defaultHost: 7650 }],
     profiles: ["app"],
-    dependsOn: ["couchdb", "garage", "meilisearch"],
+    dependsOn: ["couchdb", "garage", "meilisearch", "fossil"],
     envFile: "../.env",
     containerEnv: {
       WEBAPI_HOST: "0.0.0.0",
       WEBAPI_PORT: "7650",
       COUCHDB_URL: "http://couchdb:5984",
       S3_ENDPOINT: "http://garage:3900",
-      MEILI_HOST: "http://meilisearch:7700"
+      MEILI_HOST: "http://meilisearch:7700",
+      FOSSIL_URL: "http://fossil:8080"
     },
     httpHealth: { path: "/health", port: 7650 },
     notes: "webapi + webui SPA + Scalar + bundled CLI; serves /app + /api."
   }
 ];
 
-// packages/shared/src/model/topology.ts
+// packages/shared/src/blueprint/topology.ts
 var TOPOLOGY_NODES = [
   {
     key: "claude-code",
@@ -1898,6 +1553,18 @@ var TOPOLOGY_NODES = [
     requiresFeature: "meilisearch",
     summary: "Rebuildable full-text index. Optional \u2014 losing it costs search, not history."
   },
+  {
+    key: "fossil",
+    serviceKey: "fossil",
+    label: "Fossil",
+    caption: "version control",
+    role: "store",
+    icon: "fossil",
+    rank: 3,
+    lane: "store",
+    level: "compact",
+    summary: "Repositories, wiki and tickets with a web UI, from one binary. Read through the gateway; nothing writes it yet."
+  },
   {
     key: "couchdb-fauxton",
     serviceKey: "couchdb",
@@ -1974,6 +1641,14 @@ var TOPOLOGY_EDGES = [
     level: "compact",
     requiresFeature: "s3Blobs"
   },
+  {
+    from: "webapi",
+    to: "fossil",
+    kind: "read-only-proxy",
+    label: "reads \xB7 /api/fossil",
+    level: "compact",
+    note: "Fossil's JSON API, allowlisted to read-only commands: over GET it would otherwise write."
+  },
   {
     from: "webapi",
     to: "meilisearch",
@@ -1982,133 +1657,562 @@ var TOPOLOGY_EDGES = [
     level: "compact",
     requiresFeature: "meilisearch"
   },
-  {
-    from: "webapi",
-    to: "couchdb",
-    kind: "curated-write",
-    label: "/api/ingest",
-    level: "expanded",
-    note: "The curated write surface that owns the document shapes; writes are never proxied."
+  {
+    from: "webapi",
+    to: "couchdb",
+    kind: "curated-write",
+    label: "/api/ingest",
+    level: "expanded",
+    note: "The curated write surface that owns the document shapes; writes are never proxied."
+  },
+  {
+    from: "couchdb",
+    to: "webapi",
+    kind: "changes-follower",
+    label: "_changes",
+    level: "expanded",
+    note: "Exists because of the hook bypass: hook-written docs get no write-time validation."
+  },
+  { from: "couchdb-fauxton", to: "couchdb", kind: "admin-of", level: "expanded" },
+  { from: "garage-ui", to: "garage", kind: "admin-of", level: "expanded" },
+  { from: "meilisearch-ui", to: "meilisearch", kind: "admin-of", level: "expanded" }
+];
+var TOPOLOGY_GROUPS = [
+  {
+    key: "clients",
+    title: "read / query",
+    members: ["webui", "cli", "agents"],
+    level: "compact"
+  },
+  {
+    key: "stores",
+    title: "your infrastructure",
+    members: ["couchdb", "garage", "meilisearch", "fossil"],
+    level: "compact"
+  }
+];
+var TOPOLOGY = {
+  nodes: TOPOLOGY_NODES,
+  edges: TOPOLOGY_EDGES,
+  groups: TOPOLOGY_GROUPS
+};
+
+// packages/shared/src/blueprint/user-settings.ts
+var DEFAULT_USER_SETTINGS = {
+  sessionListPageSize: 100,
+  transcriptPageSize: 100,
+  transcriptAutoLoadMax: 2000
+};
+var LIMITS = {
+  sessionListPageSize: 500,
+  transcriptPageSize: 500,
+  transcriptAutoLoadMax: 50000
+};
+function resolveUserSettings(fromConfig) {
+  const c = fromConfig ?? {};
+  return {
+    sessionListPageSize: clamp(c.sessionListPageSize, "sessionListPageSize"),
+    transcriptPageSize: clamp(c.transcriptPageSize, "transcriptPageSize"),
+    transcriptAutoLoadMax: clamp(c.transcriptAutoLoadMax, "transcriptAutoLoadMax")
+  };
+}
+function clamp(value, key) {
+  const fallback = DEFAULT_USER_SETTINGS[key];
+  if (typeof value !== "number" || !Number.isFinite(value))
+    return fallback;
+  const rounded = Math.floor(value);
+  if (rounded < 1)
+    return fallback;
+  return Math.min(rounded, LIMITS[key]);
+}
+
+// packages/shared/src/blueprint/build.ts
+var STALE_TEMPLATE_LINKS = {
+  couchdbFauxton: "http://127.0.0.1:7652/_utils/",
+  garageWebui: "http://127.0.0.1:7655/",
+  meilisearch: "http://127.0.0.1:7656/"
+};
+function buildServicesMenu(services, fromConfig) {
+  const derived = {};
+  for (const s of services) {
+    if (!s.adminUiServiceKey)
+      continue;
+    const port = s.resolvedPorts?.[0]?.host;
+    if (!port)
+      continue;
+    const path = s.adminUiPath ?? "/";
+    derived[s.adminUiServiceKey] = `http://127.0.0.1:${port}${path}`;
+  }
+  const configured = Object.entries(fromConfig).filter(([k, v]) => STALE_TEMPLATE_LINKS[k] !== v);
+  return { ...derived, ...Object.fromEntries(configured) };
+}
+var FOSSIL_REPOSITORY_NAME = /^[A-Za-z0-9_][A-Za-z0-9_-]*$/;
+function resolveRepositories(config) {
+  const repositories = {
+    sessions: "claude-transcripts-sessions",
+    ...config.fossil?.repositories ?? {}
+  };
+  for (const [key, name] of Object.entries(repositories)) {
+    if (!FOSSIL_REPOSITORY_NAME.test(name)) {
+      throw new Error(`config: fossil.repositories.${key} = ${JSON.stringify(name)} \u2014 use letters, digits, '-' and '_' (not starting with '-')`);
+    }
+  }
+  return repositories;
+}
+function buildAppBlueprint(config, env = {}) {
+  const version = env.CT_VERSION ?? "0.0.0-dev";
+  const services = SERVICES.map((s) => ({
+    ...s,
+    resolvedPorts: (s.ports ?? []).map((p) => ({
+      internal: p.internal,
+      host: env[p.hostEnv] ? Number(env[p.hostEnv]) : p.defaultHost,
+      label: p.label
+    }))
+  }));
+  return {
+    identity: {
+      codename: "claude-transcripts",
+      slug: config.app?.name ?? "claude-transcripts",
+      title: "Claude Transcripts",
+      version,
+      repository: "https://github.com/vredchenko/claude-transcripts"
+    },
+    services,
+    stores: {
+      databases: { ...config.couchdb.databases },
+      buckets: { ...config.s3.buckets },
+      indexes: { ...config.meilisearch?.indexes },
+      repositories: resolveRepositories(config)
+    },
+    hooks: HOOK_TYPES,
+    actions: ACTIONS,
+    bindings: BINDINGS,
+    routes: ROUTES,
+    topology: TOPOLOGY,
+    env: ENV_VARS,
+    features: config.features,
+    servicesMenu: buildServicesMenu(services, config.servicesMenu),
+    system: config.system,
+    recall: resolveRecall(config.recall, env),
+    userSettings: resolveUserSettings(config.userSettings),
+    cliSpec: CLI_SPEC
+  };
+}
+// packages/shared/src/blueprint/k8s.ts
+var WORKLOAD_ROLES = new Set(["backing", "admin-ui", "app"]);
+// packages/shared/src/blueprint/project.ts
+function toStoreEnv(model) {
+  return { FOSSIL_REPOSITORIES: Object.values(model.stores.repositories).join(",") };
+}
+// packages/shared/src/couch-url.ts
+var DEFAULT_COUCHDB_HOST = "127.0.0.1";
+var DEFAULT_COUCHDB_PORT = "7652";
+function trimTrailingSlash(url) {
+  return url.replace(/\/+$/, "");
+}
+function resolveCouchUrl(env = {}) {
+  const explicit = env.COUCHDB_URL?.trim();
+  if (explicit) {
+    const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(explicit) ? explicit : `http://${explicit}`;
+    return trimTrailingSlash(withScheme);
+  }
+  const host = env.COUCHDB_HOST || DEFAULT_COUCHDB_HOST;
+  const port = env.COUCHDB_PORT || DEFAULT_COUCHDB_PORT;
+  return `http://${host}:${port}`;
+}
+// packages/shared/src/highlight.ts
+var HIGHLIGHT_PRE = "\uE000";
+var HIGHLIGHT_POST = "\uE001";
+function stripHighlightMarks(marked) {
+  return marked.replaceAll(HIGHLIGHT_PRE, "").replaceAll(HIGHLIGHT_POST, "");
+}
+// packages/shared/src/migrations/designs.ts
+var CHUNK_ENTRIES_MAP = `function (doc) {
+  if (doc.type !== "chunk" || !doc.entries) return;
+  for (var i = 0; i < doc.entries.length; i++) {
+    var e = doc.entries[i];
+    if (!e || !e.role) continue;
+    emit([doc.session_id, doc.byte_start, i], {
+      role: e.role,
+      timestamp: e.timestamp || "",
+      text: e.text || "",
+      toolUses: e.toolUses || null,
+      toolUseId: e.toolUseId || null,
+      isError: e.isError || false,
+      isSidechain: e.isSidechain || false,
+      kind: e.kind || null
+    });
+  }
+}`;
+var CHUNKS_DESIGN = {
+  _id: "_design/chunks",
+  language: "javascript",
+  views: {
+    by_session: {
+      map: 'function(doc){if(doc.type==="chunk"){emit([doc.session_id,doc.byte_start],{byte_start:doc.byte_start,byte_end:doc.byte_end,entry_count:doc.entry_count});}}'
+    },
+    entry_count_by_session: {
+      map: 'function(doc){if(doc.type==="chunk"){emit(doc.session_id,doc.entry_count||0);}}',
+      reduce: "_sum"
+    },
+    entries_by_session: { map: CHUNK_ENTRIES_MAP, reduce: "_count" }
+  }
+};
+var INITIAL_DESIGNS = [
+  {
+    _id: "_design/sessions",
+    language: "javascript",
+    views: {
+      by_date: {
+        map: 'function(doc){if(doc.type==="summary"){var t=doc.timestamp.split(/[-T:]/);emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],{session_id:doc.session_id,event_count:doc.event_count,prompt_count:doc.prompt_count,error_count:doc.error_count,cwd:doc.cwd});}}',
+        reduce: "_count"
+      },
+      by_cwd: {
+        map: 'function(doc){if(doc.type==="summary"){emit([doc.cwd,doc.timestamp],{session_id:doc.session_id,event_count:doc.event_count,prompt_count:doc.prompt_count});}}',
+        reduce: "_count"
+      }
+    }
+  },
+  {
+    _id: "_design/events",
+    language: "javascript",
+    views: {
+      by_session: {
+        map: 'function(doc){if(doc.type==="event"){emit([doc.session_id,doc.timestamp],{event:doc.event,tool_name:doc.tool_name||null,input_preview:doc.input_preview||doc.prompt_preview||doc.error_preview||null});}}'
+      },
+      by_type: {
+        map: 'function(doc){if(doc.type==="event"){var t=doc.timestamp.split(/[-T:]/);emit([doc.event,parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],1);}}',
+        reduce: "_count"
+      }
+    }
+  },
+  {
+    _id: "_design/tools",
+    language: "javascript",
+    views: {
+      usage: {
+        map: 'function(doc){if(doc.type==="event"&&doc.tool_name){var t=doc.timestamp.split(/[-T:]/);emit([doc.tool_name,parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],1);}}',
+        reduce: "_count"
+      },
+      failures: {
+        map: 'function(doc){if(doc.event==="PostToolUseFailure"){emit([doc.tool_name,doc.timestamp],{session_id:doc.session_id,error_preview:doc.error_preview,cwd:doc.cwd});}}'
+      },
+      errors: {
+        map: 'function(doc){if(doc.event==="PostToolUseFailure"||doc.error){emit([doc.tool_name||"unknown",doc.timestamp],{session_id:doc.session_id,error_preview:doc.error_preview||doc.error,cwd:doc.cwd});}}'
+      }
+    }
+  },
+  {
+    _id: "_design/activity",
+    language: "javascript",
+    views: {
+      timeline: {
+        map: 'function(doc){if(doc.type==="event"){var t=doc.timestamp.split(/[-T:]/);emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2]),parseInt(t[3])],1);}}',
+        reduce: "_count"
+      }
+    }
+  },
+  CHUNKS_DESIGN,
+  {
+    _id: "_design/session_meta",
+    language: "javascript",
+    views: {
+      start_meta: {
+        map: 'function(doc){if(doc.event==="SessionStart"){emit(doc.session_id,{timestamp:doc.timestamp,model:doc.model||"",cwd:doc.cwd||"",hostname:doc.hostname||""});}}'
+      },
+      tokens_by_date: {
+        map: 'function(doc){if(doc.type==="summary"&&doc.token_usage){var t=doc.timestamp.split(/[-T:]/);var u=doc.token_usage;emit([parseInt(t[0]),parseInt(t[1]),parseInt(t[2])],{input:u.input||0,output:u.output||0,cacheCreation:u.cacheCreation||0,cacheRead:u.cacheRead||0,total:u.total||0,sessions:1});}}',
+        reduce: "_sum"
+      }
+    }
+  }
+];
+// packages/shared/src/migrations/session-index.ts
+var AGGREGATE_MAP = `function (doc) {
+  if (!doc.session_id) return;
+  // A \`chunk\` doc contributes transcript coverage ONLY \u2014 no timestamps, no counts \u2014
+  // so every other metric keeps the exact meaning it had before chunks were indexed.
+  // \`chunkEntries\` counts turns the chunk view can actually serve (byte-range-only
+  // chunks carry no \`entries[]\`), while \`chunkBytes\` tracks raw byte coverage.
+  if (doc.type === "chunk") {
+    emit(doc.session_id, {
+      ended: 0, events: 0, prompts: 0, errors: 0, started: 0, tools: {},
+      first: "", last: "", model: "", cwd: "", hostname: "",
+      modelAt: "", cwdAt: "", hostnameAt: "", summary: null,
+      chunkEntries: doc.entries ? doc.entries.length : 0,
+      chunkBytes: doc.byte_end || 0
+    });
+    return;
+  }
+  if (doc.type !== "event" && doc.type !== "summary") return;
+  var isSummary = doc.type === "summary";
+  var ts = doc.timestamp || "";
+  var model = (doc.event === "SessionStart" || isSummary) ? (doc.model || "") : "";
+  var tools = {};
+  if (doc.event === "PostToolUse" && doc.tool_name) tools[doc.tool_name] = 1;
+  emit(doc.session_id, {
+    ended: isSummary ? 1 : 0,
+    events: doc.type === "event" ? 1 : 0,
+    prompts: doc.event === "UserPromptSubmit" ? 1 : 0,
+    errors: doc.event === "PostToolUseFailure" ? 1 : 0,
+    started: doc.event === "SessionStart" ? 1 : 0,
+    tools: tools,
+    first: ts,
+    last: ts,
+    model: model,
+    cwd: doc.cwd || "",
+    hostname: doc.hostname || "",
+    modelAt: model ? ts : "",
+    cwdAt: doc.cwd ? ts : "",
+    hostnameAt: doc.hostname ? ts : "",
+    summary: isSummary ? {
+      event_count: doc.event_count || 0,
+      prompt_count: doc.prompt_count || 0,
+      error_count: doc.error_count || 0,
+      tool_counts: doc.tool_counts || {},
+      end_reason: doc.end_reason || "",
+      transcript_bytes: doc.transcript_bytes || 0,
+      token_usage: doc.token_usage || null,
+      timestamp: doc.timestamp || "",
+      source: doc.source || ""
+    } : null,
+    chunkEntries: 0,
+    chunkBytes: 0
+  });
+}`;
+var AGGREGATE_REDUCE = `function (keys, values, rereduce) {
+  var acc = { ended:0, events:0, prompts:0, errors:0, started:0, tools:{}, first:"", last:"", model:"", cwd:"", hostname:"", modelAt:"", cwdAt:"", hostnameAt:"", summary:null, chunkEntries:0, chunkBytes:0 };
+  // Keep the earliest-stamped value; an unstamped one sorts last, ties go to the smaller value.
+  function earliest(v, f) {
+    var val = v[f];
+    if (!val) return;
+    var at = v[f + "At"] || "", a = at || "\\uffff", b = acc[f + "At"] || "\\uffff";
+    if (acc[f] === "" || a < b || (a === b && val < acc[f])) { acc[f] = val; acc[f + "At"] = at; }
+  }
+  for (var i = 0; i < values.length; i++) {
+    var v = values[i];
+    if (!v) continue;
+    acc.chunkEntries += v.chunkEntries || 0;
+    if ((v.chunkBytes || 0) > acc.chunkBytes) acc.chunkBytes = v.chunkBytes;
+    acc.ended += v.ended || 0;
+    acc.events += v.events || 0;
+    acc.prompts += v.prompts || 0;
+    acc.errors += v.errors || 0;
+    acc.started += v.started || 0;
+    if (v.last && v.last > acc.last) acc.last = v.last;
+    if (v.first && (acc.first === "" || v.first < acc.first)) acc.first = v.first;
+    earliest(v, "model");
+    earliest(v, "cwd");
+    earliest(v, "hostname");
+    // A session has one \`summary:<id>\` doc, so there is only ever one to keep.
+    if (v.summary) acc.summary = v.summary;
+    var t = v.tools || {};
+    for (var k in t) { if (t.hasOwnProperty(k)) acc.tools[k] = (acc.tools[k] || 0) + t[k]; }
+  }
+  var names = Object.keys(acc.tools).sort(), tools = {};
+  for (var j = 0; j < names.length; j++) tools[names[j]] = acc.tools[names[j]];
+  acc.tools = tools;
+  return acc;
+}`;
+var EVENT_TIMES_MAP = `function (doc) {
+  if (!doc.session_id || !doc.timestamp) return;
+  if (doc.type !== "event" && doc.type !== "summary") return;
+  emit(doc.session_id, doc.timestamp);
+}`;
+var SESSION_INDEX_DESIGN = {
+  _id: "_design/session_index",
+  language: "javascript",
+  views: {
+    aggregate: { map: AGGREGATE_MAP, reduce: AGGREGATE_REDUCE },
+    event_times: { map: EVENT_TIMES_MAP }
+  }
+};
+
+// packages/shared/src/migrations/speaker-split.ts
+var BY_ROLE_MAP = `function (doc) {
+  if (doc.type !== "chunk" || !doc.entries) return;
+  for (var i = 0; i < doc.entries.length; i++) {
+    var e = doc.entries[i];
+    if (!e || !e.role) continue;
+    emit([doc.session_id, e.role, doc.byte_start, i], {
+      role: e.role,
+      timestamp: e.timestamp || "",
+      text: e.text || "",
+      toolUses: e.toolUses || null,
+      toolUseId: e.toolUseId || null,
+      isError: e.isError || false
+    });
+  }
+}`;
+var BY_ROLE_TIME_MAP = `function (doc) {
+  if (doc.type !== "chunk" || !doc.entries) return;
+  for (var i = 0; i < doc.entries.length; i++) {
+    var e = doc.entries[i];
+    if (!e || !e.role) continue;
+    emit([e.role, e.timestamp || "", doc.session_id, doc.byte_start, i], {
+      sessionId: doc.session_id,
+      cwd: doc.cwd || "",
+      role: e.role,
+      timestamp: e.timestamp || "",
+      text: e.text || ""
+    });
+  }
+}`;
+var SPEAKER_SPLIT_DESIGN = {
+  _id: "_design/speaker_split",
+  language: "javascript",
+  views: {
+    by_role: { map: BY_ROLE_MAP, reduce: "_count" },
+    by_role_time: { map: BY_ROLE_TIME_MAP, reduce: "_count" }
+  }
+};
+
+// packages/shared/src/migrations/registry.ts
+var initialSchema = {
+  id: 1,
+  name: "initial-schema",
+  async up(ctx) {
+    for (const design of INITIAL_DESIGNS) {
+      ctx.log(`+ ${design._id}`);
+      const { _rev, ...body } = design;
+      await ctx.putDoc(design._id, body);
+    }
+  },
+  async down(ctx) {
+    for (const design of INITIAL_DESIGNS) {
+      ctx.log(`- ${design._id}`);
+      await ctx.deleteDoc(design._id);
+    }
+  }
+};
+var sessionIndexView = {
+  id: 2,
+  name: "session-index-view",
+  async up(ctx) {
+    ctx.log(`+ ${SESSION_INDEX_DESIGN._id}`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`- ${SESSION_INDEX_DESIGN._id}`);
+    await ctx.deleteDoc(SESSION_INDEX_DESIGN._id);
+  }
+};
+var sessionIndexSource = {
+  id: 3,
+  name: "session-index-source",
+  async up(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (emit summary.source)`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (source field left in place \u2014 additive)`);
+  }
+};
+var speakerSplitView = {
+  id: 4,
+  name: "speaker-split-view",
+  async up(ctx) {
+    ctx.log(`+ ${SPEAKER_SPLIT_DESIGN._id}`);
+    const { _rev, ...body } = SPEAKER_SPLIT_DESIGN;
+    await ctx.putDoc(SPEAKER_SPLIT_DESIGN._id, body);
   },
-  {
-    from: "couchdb",
-    to: "webapi",
-    kind: "changes-follower",
-    label: "_changes",
-    level: "expanded",
-    note: "Exists because of the hook bypass: hook-written docs get no write-time validation."
+  async down(ctx) {
+    ctx.log(`- ${SPEAKER_SPLIT_DESIGN._id}`);
+    await ctx.deleteDoc(SPEAKER_SPLIT_DESIGN._id);
+  }
+};
+var speakerSplitTimeView = {
+  id: 5,
+  name: "speaker-split-time-view",
+  async up(ctx) {
+    ctx.log(`~ ${SPEAKER_SPLIT_DESIGN._id} (add by_role_time)`);
+    const { _rev, ...body } = SPEAKER_SPLIT_DESIGN;
+    await ctx.putDoc(SPEAKER_SPLIT_DESIGN._id, body);
   },
-  { from: "couchdb-fauxton", to: "couchdb", kind: "admin-of", level: "expanded" },
-  { from: "garage-ui", to: "garage", kind: "admin-of", level: "expanded" },
-  { from: "meilisearch-ui", to: "meilisearch", kind: "admin-of", level: "expanded" }
-];
-var TOPOLOGY_GROUPS = [
-  {
-    key: "clients",
-    title: "read / query",
-    members: ["webui", "cli", "agents"],
-    level: "compact"
+  async down(ctx) {
+    ctx.log(`~ ${SPEAKER_SPLIT_DESIGN._id} (by_role_time left in place \u2014 additive)`);
+  }
+};
+var chunkEntriesView = {
+  id: 6,
+  name: "chunk-entries-view",
+  async up(ctx) {
+    ctx.log(`~ ${CHUNKS_DESIGN._id} (add entries_by_session)`);
+    const { _rev, ...body } = CHUNKS_DESIGN;
+    await ctx.putDoc(CHUNKS_DESIGN._id, body);
   },
-  {
-    key: "stores",
-    title: "your infrastructure",
-    members: ["couchdb", "garage", "meilisearch"],
-    level: "compact"
+  async down(ctx) {
+    ctx.log(`~ ${CHUNKS_DESIGN._id} (entries_by_session left in place \u2014 additive)`);
   }
-];
-var TOPOLOGY = {
-  nodes: TOPOLOGY_NODES,
-  edges: TOPOLOGY_EDGES,
-  groups: TOPOLOGY_GROUPS
 };
-
-// packages/shared/src/model/user-settings.ts
-var DEFAULT_USER_SETTINGS = {
-  sessionListPageSize: 100,
-  transcriptPageSize: 100,
-  transcriptAutoLoadMax: 2000
+var sessionIndexChunkCoverage = {
+  id: 7,
+  name: "session-index-chunk-coverage",
+  async up(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (emit chunk coverage)`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (chunk coverage left in place \u2014 additive)`);
+  }
 };
-var LIMITS = {
-  sessionListPageSize: 500,
-  transcriptPageSize: 500,
-  transcriptAutoLoadMax: 50000
+var chunkEntryKind = {
+  id: 8,
+  name: "chunk-entry-kind",
+  async up(ctx) {
+    ctx.log(`~ ${CHUNKS_DESIGN._id} (emit entry kind)`);
+    const { _rev, ...body } = CHUNKS_DESIGN;
+    await ctx.putDoc(CHUNKS_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`~ ${CHUNKS_DESIGN._id} (kind left in place \u2014 additive)`);
+  }
 };
-function resolveUserSettings(fromConfig) {
-  const c = fromConfig ?? {};
-  return {
-    sessionListPageSize: clamp(c.sessionListPageSize, "sessionListPageSize"),
-    transcriptPageSize: clamp(c.transcriptPageSize, "transcriptPageSize"),
-    transcriptAutoLoadMax: clamp(c.transcriptAutoLoadMax, "transcriptAutoLoadMax")
-  };
-}
-function clamp(value, key) {
-  const fallback = DEFAULT_USER_SETTINGS[key];
-  if (typeof value !== "number" || !Number.isFinite(value))
-    return fallback;
-  const rounded = Math.floor(value);
-  if (rounded < 1)
-    return fallback;
-  return Math.min(rounded, LIMITS[key]);
-}
-
-// packages/shared/src/model/build.ts
-var STALE_TEMPLATE_LINKS = {
-  couchdbFauxton: "http://127.0.0.1:7652/_utils/",
-  garageWebui: "http://127.0.0.1:7655/",
-  meilisearch: "http://127.0.0.1:7656/"
+var sessionIndexEventTimes = {
+  id: 9,
+  name: "session-index-event-times",
+  async up(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (add event_times view)`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (event_times left in place \u2014 additive)`);
+  }
 };
-function buildServicesMenu(services, fromConfig) {
-  const derived = {};
-  for (const s of services) {
-    if (!s.adminUiServiceKey)
-      continue;
-    const port = s.resolvedPorts?.[0]?.host;
-    if (!port)
-      continue;
-    const path = s.adminUiPath ?? "/";
-    derived[s.adminUiServiceKey] = `http://127.0.0.1:${port}${path}`;
+var sessionIndexDeterministic = {
+  id: 10,
+  name: "session-index-deterministic",
+  async up(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (earliest model/cwd/hostname)`);
+    const { _rev, ...body } = SESSION_INDEX_DESIGN;
+    await ctx.putDoc(SESSION_INDEX_DESIGN._id, body);
+  },
+  async down(ctx) {
+    ctx.log(`~ ${SESSION_INDEX_DESIGN._id} (deterministic pick left in place)`);
   }
-  const configured = Object.entries(fromConfig).filter(([k, v]) => STALE_TEMPLATE_LINKS[k] !== v);
-  return { ...derived, ...Object.fromEntries(configured) };
+};
+var MIGRATIONS = [
+  initialSchema,
+  sessionIndexView,
+  sessionIndexSource,
+  speakerSplitView,
+  speakerSplitTimeView,
+  chunkEntriesView,
+  sessionIndexChunkCoverage,
+  chunkEntryKind,
+  sessionIndexEventTimes,
+  sessionIndexDeterministic
+];
+function latestVersion() {
+  return MIGRATIONS.reduce((max, m) => Math.max(max, m.id), 0);
 }
-function buildAppModel(config, env = {}) {
-  const version = env.CT_VERSION ?? "0.0.0-dev";
-  const services = SERVICES.map((s) => ({
-    ...s,
-    resolvedPorts: (s.ports ?? []).map((p) => ({
-      internal: p.internal,
-      host: env[p.hostEnv] ? Number(env[p.hostEnv]) : p.defaultHost,
-      label: p.label
-    }))
-  }));
-  return {
-    identity: {
-      codename: "claude-transcripts",
-      slug: config.app?.name ?? "claude-transcripts",
-      title: "Claude Transcripts",
-      version
-    },
-    services,
-    stores: {
-      databases: { ...config.couchdb.databases },
-      buckets: { ...config.s3.buckets }
-    },
-    hooks: HOOK_TYPES,
-    actions: ACTIONS,
-    bindings: BINDINGS,
-    routes: ROUTES,
-    topology: TOPOLOGY,
-    env: ENV_VARS,
-    features: config.features,
-    servicesMenu: buildServicesMenu(services, config.servicesMenu),
-    system: config.system,
-    recall: resolveRecall(config.recall, env),
-    userSettings: resolveUserSettings(config.userSettings),
-    cliSpec: CLI_SPEC
-  };
+function docTransformsBetween(from, to, migrations = MIGRATIONS) {
+  return migrations.filter((m) => m.id > from && m.id <= to && m.transformsDocs === true).sort((a, b) => a.id - b.id).map((m) => ({ id: m.id, name: m.name }));
 }
-// packages/shared/src/model/k8s.ts
-var WORKLOAD_ROLES = new Set(["backing", "admin-ui", "app"]);
 // packages/shared/src/index.ts
 function usageWeight(u) {
   return (u.input_tokens || 0) + (u.output_tokens || 0) + (u.cache_creation_input_tokens || 0) + (u.cache_read_input_tokens || 0);
@@ -3373,9 +3477,9 @@ var EMBEDDED_ASSETS = {
   compose: {
     path: "deploy/docker-compose.yml",
     source: "deploy/docker-compose.yml",
-    content: `# GENERATED from the app model (@claude-transcripts/shared) by scripts/gen-compose.ts.
-# Do NOT edit by hand \u2014 run \`bun run gen:compose\` to regenerate, and change the model
-# (packages/shared/src/model/services.ts) instead. Inline edits here are lost silently.
+    content: `# GENERATED from the blueprint (@claude-transcripts/shared) by scripts/gen-compose.ts.
+# Do NOT edit by hand \u2014 run \`bun run gen:compose\` to regenerate, and change the blueprint
+# (packages/shared/src/blueprint/services.ts) instead. Inline edits here are lost silently.
 # See docs/operate/containers.md.
 #
 # Claude Transcripts \u2014 backing services + app.
@@ -3466,6 +3570,18 @@ services:
     restart: unless-stopped
     networks:
       - claude-transcripts
+  fossil:
+    image: \${IMAGE_NS}/claude-transcripts-fossil:\${FOSSIL_TAG:-2.28}
+    container_name: claude-transcripts-fossil
+    environment:
+      - FOSSIL_REPOSITORIES=\${FOSSIL_REPOSITORIES:-claude-transcripts-sessions}
+    ports:
+      - 127.0.0.1:\${FOSSIL_PORT:-7658}:8080
+    volumes:
+      - ./data/fossil:/museum
+    restart: unless-stopped
+    networks:
+      - claude-transcripts
   meilisearch:
     image: \${IMAGE_NS}/claude-transcripts-meilisearch:\${MEILI_TAG:-v1.10}
     container_name: claude-transcripts-meilisearch
@@ -3497,6 +3613,7 @@ services:
       - couchdb
       - garage
       - meilisearch
+      - fossil
     env_file: ../.env
     environment:
       - WEBAPI_HOST=0.0.0.0
@@ -3504,6 +3621,7 @@ services:
       - COUCHDB_URL=http://couchdb:5984
       - S3_ENDPOINT=http://garage:3900
       - MEILI_HOST=http://meilisearch:7700
+      - FOSSIL_URL=http://fossil:8080
     ports:
       - 127.0.0.1:\${WEBAPI_PORT:-7650}:7650
     restart: unless-stopped
@@ -3518,7 +3636,7 @@ networks:
   composeUpstream: {
     path: "deploy/docker-compose.upstream.yml",
     source: "deploy/docker-compose.upstream.yml",
-    content: `# GENERATED from the app model (@claude-transcripts/shared) by scripts/gen-compose-override.ts.
+    content: `# GENERATED from the blueprint (@claude-transcripts/shared) by scripts/gen-compose-override.ts.
 # Do NOT edit by hand \u2014 run \`bun run gen:compose-override\` to regenerate.
 #
 # Upstream-image dev override: pins each mirrored backing service to its canonical
@@ -3529,7 +3647,7 @@ networks:
 #   bun run scripts/stack.ts up --upstream        # the runner does this for you
 #
 # Tags still come from .env (COUCHDB_TAG, GARAGE_TAG, \u2026). Override an image here by
-# changing its \`upstream\` in packages/shared/src/model/services.ts. The community
+# changing its \`upstream\` in packages/shared/src/blueprint/services.ts. The community
 # admin-UI images are best-effort; swap them if your registry differs.
 
 name: claude-transcripts
@@ -3540,6 +3658,10 @@ services:
     image: dxflrs/garage:\${GARAGE_TAG:-v2.3.0}
   garage-ui:
     image: khairul169/garage-webui:\${GARAGE_UI_TAG:-1.1.0}
+  fossil:
+    image: claude-transcripts-fossil:\${FOSSIL_TAG:-2.28}-local
+    build:
+      context: ./fossil
   meilisearch:
     image: getmeili/meilisearch:\${MEILI_TAG:-v1.10}
   meilisearch-ui:
@@ -3570,6 +3692,154 @@ api_bind_addr = "[::]:3900"
 
 [admin]
 api_bind_addr = "[::]:3903"
+`
+  },
+  fossilDockerfile: {
+    path: "deploy/fossil/Dockerfile",
+    source: "deploy/fossil/Dockerfile",
+    content: `# Fossil SCM \u2014 built from the official release source (https://fossil-scm.org).
+#
+# Fossil publishes no container image, only a Dockerfile in its source tree
+# (www/containers.md). This is that file's recipe, pinned to a release instead of
+# trunk and verified by checksum: a static, musl-linked binary on an empty base, so
+# the image holds Fossil and nothing else. Hand-maintained (NOT generated); its
+# version must equal the \`fossil\` service's \`defaultTag\` in
+# packages/shared/src/blueprint/services.ts \u2014 a test holds the two together.
+#
+# Build context is this directory, and only entrypoint.sh is COPY'd from it, so the
+# image builds the same from a repo checkout, a user install (which ships both files),
+# or CI.
+#
+# To bump: take the release's tarball link from https://fossil-scm.org/home/uv/download.html,
+# set FOSSIL_VERSION / FOSSIL_CHECKIN / FOSSIL_SHA256, and the blueprint's defaultTag.
+
+## \u2500\u2500 build: a static Fossil binary \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+FROM alpine:3.22 AS build
+RUN apk add --no-cache gcc make linux-headers musl-dev \\
+      openssl-dev openssl-libs-static zlib-dev zlib-static
+ARG FOSSIL_VERSION=2.28
+# The release check-in (\`fossil version\` prints its prefix) and the sha256 of the
+# tarball fossil-scm.org serves for it.
+ARG FOSSIL_CHECKIN=52445a27f116603d784ad753c6acd494e0b02aeaf8502ee0fee0aa30030f4c4e
+ARG FOSSIL_SHA256=84c18824ca227e7602d2408b663c3747f754ad306ed5c73ddab959d6589538a6
+WORKDIR /fsl
+ADD --checksum=sha256:\${FOSSIL_SHA256} \\
+    https://fossil-scm.org/home/tarball/\${FOSSIL_CHECKIN}/fossil-src-\${FOSSIL_VERSION}.tar.gz \\
+    src.tar.gz
+RUN tar -xzf src.tar.gz --strip-components=1 \\
+  && ./configure --static --json CFLAGS='-Os -s' \\
+  && make -j"$(nproc)" \\
+  && ./fossil version | grep -q "version \${FOSSIL_VERSION} "
+
+## \u2500\u2500 os: the few files a scratch image still needs \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+# The musl variant: a static busybox, so the one binary runs on \`scratch\`.
+FROM busybox:1.37-musl AS os
+RUN mkdir -p /e /museum \\
+  && echo "root:x:0:0:Admin:/:/false" > /e/passwd \\
+  && echo "root:x:0:root" > /e/group
+
+## \u2500\u2500 run \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+FROM scratch
+COPY --from=build --chmod=755 /fsl/fossil /bin/fossil
+COPY --from=os /e/passwd /e/group /etc/
+COPY --from=os --chmod=1777 /tmp /tmp/
+COPY --from=os /museum /museum/
+# Only for the seed script (entrypoint.sh): one static binary, no applet links.
+COPY --from=os /bin/busybox /bin/busybox
+COPY --chmod=755 entrypoint.sh /bin/fossil-entrypoint
+ENV PATH=/bin
+EXPOSE 8080/tcp
+# Runs as root, unlike upstream's image (a fixed UID 499). The repo lives on a
+# bind mount or volume created by whoever runs the stack, and a fixed UID can't write
+# to a directory it doesn't own. Fossil handles root itself: serving a repository
+# file owned by a non-root user, it chroots into the repo's directory and drops to
+# that user (\`chown\` the repo to opt in). See https://fossil-scm.org/home/help/server.
+# Seeds the repositories named in FOSSIL_REPOSITORIES (from \`fossil.repositories\` in
+# config/), then execs \`fossil server\` with CMD \u2014 see entrypoint.sh.
+ENTRYPOINT ["/bin/busybox", "sh", "/bin/fossil-entrypoint"]
+# Serve the directory, not a file: every \`<name>.fossil\` in /museum is served at
+# /<name>/, and "/" lists them. Not upstream's \`--create\`, which makes a generic
+# repository with a generated admin login; ours are made by the seed.
+# --jsmode bundled: one JS file, fewer requests.
+CMD ["--repolist", "--jsmode", "bundled", "/museum"]
+`
+  },
+  fossilEntrypoint: {
+    path: "deploy/fossil/entrypoint.sh",
+    source: "deploy/fossil/entrypoint.sh",
+    content: `#!/bin/sh
+# Seed, then serve. Run by busybox sh inside the Fossil image (deploy/fossil/Dockerfile).
+#
+# FOSSIL_REPOSITORIES names the repositories this instance owns, comma-separated \u2014
+# projected from \`fossil.repositories\` in config/ (ADR 0031). Each one missing from
+# the data directory is created here, because Fossil has no HTTP call that creates a
+# repository: the seed has to run where the binary and the volume are. Existing
+# repositories are never touched, so a restart is a no-op.
+#
+# A seeded repository needs no login to READ: the built-in \`nobody\` user can browse,
+# clone and download (ADR 0020). It can't write. Fossil's JSON API takes parameters
+# from the query string, so with write capabilities a plain GET could change the
+# repository \u2014 and any web page the user visits can send one to a localhost port
+# (an <img> tag is enough). The admin user exists because Fossil requires one; its
+# generated password is discarded, and \`fossil user password\` sets one when needed.
+#
+# FOSSIL_MUSEUM and FOSSIL_BUSYBOX exist for the tests (entrypoint.test.ts); the image
+# uses the defaults.
+set -euf # -f: an entry like \`*\` must stay a (rejected) name, not glob the cwd
+
+museum="\${FOSSIL_MUSEUM:-/museum}"
+bb="\${FOSSIL_BUSYBOX-/bin/busybox}"
+
+# Read-only for anonymous visitors: check-out/browse (o), clone (g), wiki (j), tickets
+# (r), hyperlinks (h), zip/tarball downloads (z).
+NOBODY_CAPS="ghjorz"
+
+# What a new repository holds beyond \`fossil new\` and its users. A placeholder: the
+# seed's contents (users and roles, wiki, ticket schema, tags, settings) are still to
+# be defined \u2014 https://github.com/vredchenko/claude-transcripts/issues/210. Runs once,
+# on the not-yet-served copy, so anything added here must only ever create.
+seed_content() {
+  : "$1"
+}
+
+trim() {
+  s="$1"
+  while :; do
+    case "$s" in
+      [[:space:]]*) s="\${s#?}" ;;
+      *[[:space:]]) s="\${s%?}" ;;
+      *) break ;;
+    esac
+  done
+  printf '%s' "$s"
+}
+
+IFS=','
+for entry in \${FOSSIL_REPOSITORIES:-}; do
+  name="$(trim "$entry")"
+  [ -n "$name" ] || continue
+  # The URL rules \`fossil server\` applies to a repository directory, so a name that
+  # can't be served is refused here rather than created and then unreachable.
+  case "$name" in
+    -* | *[!A-Za-z0-9_-]*)
+      echo "fossil-seed: skipping '$name' (letters, digits, '-' and '_' only)" >&2
+      continue
+      ;;
+  esac
+  repo="$museum/$name.fossil"
+  [ -e "$repo" ] && continue
+  # Built under a name \`--repolist\` doesn't serve, then renamed: a seed interrupted
+  # half-way leaves no half-made repository to be served or skipped forever.
+  $bb rm -f "$repo.new"
+  fossil new --admin-user claude-transcripts --project-name "$name" "$repo.new" >/dev/null
+  fossil user capabilities nobody "$NOBODY_CAPS" -R "$repo.new" >/dev/null
+  seed_content "$repo.new"
+  $bb mv "$repo.new" "$repo"
+  echo "fossil-seed: created $repo (anonymous read-only)"
+done
+unset IFS
+
+exec fossil server "$@"
 `
   },
   appConfig: {
@@ -3602,6 +3872,11 @@ api_bind_addr = "[::]:3903"
       "turns": "claude-transcripts-turns"
     }
   },
+  "fossil": {
+    "repositories": {
+      "sessions": "claude-transcripts-sessions"
+    }
+  },
   "features": {
     "s3Blobs": true,
     "midFlightChunking": true,
@@ -4846,7 +5121,7 @@ var HANDLERS = {
 
 // packages/cli/src/hook/index.ts
 function hookBindings() {
-  const model = buildAppModel(loadAppConfig(), process.env);
+  const model = buildAppBlueprint(loadAppConfig(), process.env);
   const out = {};
   for (const b of model.bindings)
     out[b.event] = b.actions;
@@ -5461,17 +5736,20 @@ function composeFiles(paths, upstream) {
 
 // packages/cli/src/lib/compose.ts
 var {$ } = globalThis.Bun;
+function storeEnv() {
+  return toStoreEnv(buildAppBlueprint(loadAppConfig(), {}));
+}
 function fileArgs(paths) {
   return composeFiles(paths, true).flatMap((f) => ["-f", f]);
 }
 async function compose(opts, args) {
   const profile = opts.app ? ["--profile", "app"] : [];
-  await $`docker compose --env-file ${opts.paths.instanceEnv} ${fileArgs(opts.paths)} ${profile} ${args}`.env({ ...process.env, ...opts.env });
+  await $`docker compose --env-file ${opts.paths.instanceEnv} ${fileArgs(opts.paths)} ${profile} ${args}`.env({ ...process.env, ...storeEnv(), ...opts.env });
 }
 async function composeQuiet(opts, args) {
   const profile = opts.app ? ["--profile", "app"] : [];
   try {
-    const text = await $`docker compose --env-file ${opts.paths.instanceEnv} ${fileArgs(opts.paths)} ${profile} ${args}`.env({ ...process.env, ...opts.env }).quiet().text();
+    const text = await $`docker compose --env-file ${opts.paths.instanceEnv} ${fileArgs(opts.paths)} ${profile} ${args}`.env({ ...process.env, ...storeEnv(), ...opts.env }).quiet().text();
     return { ok: true, text };
   } catch (err) {
     return { ok: false, text: String(err.stderr ?? err) };
@@ -5659,7 +5937,8 @@ var PORT_KEYS = [
   "GARAGE_ADMIN_PORT",
   "GARAGE_WEBUI_PORT",
   "MEILI_PORT",
-  "MEILI_UI_PORT"
+  "MEILI_UI_PORT",
+  "FOSSIL_PORT"
 ];
 function secret(bytes = 32) {
   return randomBytes(bytes).toString("hex");
@@ -5707,6 +5986,7 @@ function buildInstanceEnv(opts = {}) {
     GARAGE_UI_TAG: "1.1.0",
     MEILI_TAG: "v1.10",
     MEILI_UI_TAG: "latest",
+    FOSSIL_TAG: "2.28",
     COUCHDB_URL: "",
     COUCHDB_HOST: "127.0.0.1",
     COUCHDB_USER: "admin",
@@ -5719,6 +5999,7 @@ function buildInstanceEnv(opts = {}) {
     GARAGE_ADMIN_TOKEN: secret(32),
     GARAGE_METRICS_TOKEN: secret(32),
     MEILI_HOST: `http://127.0.0.1:${ports.MEILI_PORT}`,
+    FOSSIL_URL: `http://127.0.0.1:${ports.FOSSIL_PORT}`,
     MEILI_MASTER_KEY: opts.meiliMasterKey ? secret(24) : "",
     MEILI_API_KEY: ""
   };
@@ -5729,10 +6010,24 @@ var HEADER = [
   "Rotating a secret here does NOT rotate it in an already-provisioned store."
 ];
 var INSTALLER_OWNED = ["APP_TAG"];
+function backfillPorts(existing) {
+  const base = Number(existing.WEBAPI_PORT);
+  if (!Number.isInteger(base) || base <= 0)
+    return {};
+  const out = {};
+  PORT_KEYS.forEach((key, i) => {
+    if (existing[key] === undefined)
+      out[key] = String(base + i);
+  });
+  if (out.FOSSIL_PORT && existing.FOSSIL_URL === undefined) {
+    out.FOSSIL_URL = `http://127.0.0.1:${out.FOSSIL_PORT}`;
+  }
+  return out;
+}
 function loadOrCreateInstanceEnv(path, opts = {}) {
   const generated = buildInstanceEnv(opts);
   const existing = existsSync6(path) ? parseEnv(readFileSync10(path, "utf8")) : {};
-  const merged = { ...generated, ...existing };
+  const merged = { ...generated, ...backfillPorts(existing), ...existing };
   for (const key of INSTALLER_OWNED) {
     if (generated[key] !== undefined)
       merged[key] = generated[key];
@@ -6177,6 +6472,29 @@ async function resolvePortBase(base, span) {
   }
   return null;
 }
+async function relocateAddedPorts(path, env, priorKeys) {
+  const added = PORT_KEYS.filter((k) => !priorKeys.has(k));
+  if (added.length === 0)
+    return env;
+  const own = new Set(PORT_KEYS.map((k) => Number(env[k])));
+  const patch = {};
+  for (const key of added) {
+    let port = Number(env[key]);
+    const isOwnDuplicate = PORT_KEYS.some((k) => k !== key && Number(env[k]) === port);
+    if (!isOwnDuplicate && await isPortFree(port))
+      continue;
+    do
+      port += 1;
+    while (own.has(port) || !await isPortFree(port));
+    own.add(port);
+    patch[key] = String(port);
+    console.log(`  \u2192 ${key} ${env[key]} is taken; using ${port}`);
+  }
+  if (patch.FOSSIL_PORT && !priorKeys.has("FOSSIL_URL")) {
+    patch.FOSSIL_URL = `http://127.0.0.1:${patch.FOSSIL_PORT}`;
+  }
+  return Object.keys(patch).length ? updateInstanceEnv(path, patch) : env;
+}
 async function warnOnVersionSkew(env) {
   try {
     const res = await fetch(`http://127.0.0.1:${env.WEBAPI_PORT}/health`, {
@@ -6248,12 +6566,15 @@ async function runInstall(argv) {
   }
   step(2, TOTAL, "Configuration");
   const firstRun = !existsSync8(paths.instanceEnv);
+  const priorKeys = new Set(firstRun ? [] : Object.keys(parseEnv(readFileSync12(paths.instanceEnv, "utf8"))));
   let env = loadOrCreateInstanceEnv(paths.instanceEnv, {
     portBase,
     appTag: VERSION === DEV_VERSION ? "main" : VERSION,
     meiliMasterKey: meiliKey
   });
   console.log(`  ${firstRun ? "generated" : "reused"} ${paths.instanceEnv}`);
+  if (!firstRun)
+    env = await relocateAddedPorts(paths.instanceEnv, env, priorKeys);
   if (!firstRun && priorAppTag && priorAppTag !== env.APP_TAG) {
     console.log(`  app image pin ${priorAppTag} \u2192 ${env.APP_TAG} (follows this CLI)`);
   }